使用秘钥登录Linux主机

公钥配置：

配置文件

~/.ssh/authorized_keys

添加对应的公钥

echo "
# 备注
xxxxxx(你的公钥)xxxxxx " >> ~/.ssh/authorized_keys

ssh服务

服务配置文件

/etc/ssh/sshd_config

# 禁用密码登录
PasswordAuthentication no

# 启用公钥认证（通常默认是启用的）
PubkeyAuthentication yes

服务管理

 service sshd restart
/bin/systemctl restart sshd.service

连接

ip=127.xx.xx.xx && ssh root@$ip -i /xxx/私钥

问题

权限问题 结合这篇文章解决 https://www.putyy.com/articles/71

限制人员权限可以新增linux用户，再切换到对应用户下执行公钥配置
注意:
1、 .ssh目录的权限必须是700
2、 .ssh/authorized_keys文件权限必须是600

以下错误: 遇到错误，大概是本地存储的信息和远程主机对不上，需要清理重新建立

# 错误
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ECDSA key sent by the remote host is
SHA256:xxxrxxxxxxxeLkxxx.
Please contact your system administrator.
Add correct host key in ~/.ssh/known_hosts to get rid of this message.
Offending ECDSA key in ~/.ssh/known_hosts:38
ECDSA host key for 127.x.x.x has changed and you have requested strict checking.
Host key verification failed.

# 执行清理, xxx === 你的用户名
ssh-keygen -f ~/.ssh/known_hosts -R "127.x.x.x "